Privacy.

1. Who we are.

GAMEPLAN. Ltd is the data controller for any personal data collected through hellogameplan.com and our direct engagements. We are registered in England and Wales and operate from London, United Kingdom. For privacy questions or rights requests, write to privacy@hellogameplan.com.

2. What we collect.

We keep this minimal. The categories of data we collect are:

• Form submissions. Name, email, company, role and the brief details you choose to share when you contact us.
• Calendar bookings. Name, email and any meeting context provided through Cal.com when you book a discovery call.
• Analytics and cookies. Anonymous or pseudonymous usage data via Google Analytics 4. Page views, device, country, referrer.
• Advertising pixels. If you consent, Google, Meta and TikTok pixels record interactions for measurement and remarketing.
• Email correspondence. The content of any emails you send us, kept in our inbox for the duration of the engagement.

We do not collect special category data. We do not buy lists. We do not sell or rent your data.

3. Why we use it.

We process personal data on two lawful bases under UK GDPR:

• Legitimate interest. Replying to inbound enquiries, running our business, securing our website, preventing fraud and improving service quality.
• Consent. Non-essential cookies, analytics and advertising pixels only fire after you accept them on the cookie banner. You can withdraw consent at any time.

4. Third parties.

We use a small set of trusted processors to run the site and the business. Each is bound by their own privacy terms and processes data on our behalf:

• Netlify. Website hosting and form handling. Data may be processed in the United States under Standard Contractual Clauses.
• Cal.com. Discovery call scheduling. Stores name, email and meeting details.
• Google Analytics 4. Anonymised site analytics. IP addresses are masked.
• Google Ads, Meta and TikTok pixels. Conversion tracking and remarketing audiences. Only active with your consent.
• Email and productivity providers. Workspace email and CRM tooling used to handle our correspondence with you.

5. Cookies.

Strictly necessary cookies keep the site functional. Analytics and advertising cookies only set after you accept the consent banner. You can change your cookie choices at any time using the controls in your browser, or by emailing us to request a reset.

6. Your rights.

Under UK GDPR you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data, where applicable.
• Restrict or object to processing.
• Port your data to another provider.
• Withdraw consent at any time without affecting prior processing.
• Lodge a complaint with the Information Commissioner's Office at ico.org.uk.

To exercise any of these rights, email privacy@hellogameplan.com. We respond within one calendar month.

7. Retention.

We keep enquiry data for up to 24 months after our last contact, so we can pick up the thread if you come back. Engagement data is retained for the duration of the contract plus 24 months for tax, audit and legitimate business records. Analytics data is retained for 14 months and then aggregated.

8. Security.

We use reputable cloud providers, two-factor authentication, encrypted transit and the principle of least privilege internally. No system is infallible. If we ever experience a breach affecting your personal data, we will notify you and the ICO within the timeframes required by law.

9. Changes to this policy.

We will update this page if our processing changes. The "last updated" date at the top reflects the most recent revision. Material changes will be flagged at the top of the page for at least 30 days.

10. Contact.

Privacy questions, rights requests, anything you want clarified: privacy@hellogameplan.com. Postal address available on request.

GAMEPLAN. Ltd · Registered in England and Wales · London